Логотип exploitDog
bind:CVE-2022-23045
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2022-23045

Количество 3

Количество 3

nvd логотип

CVE-2022-23045

около 4 лет назад

PhpIPAM v1.4.4 allows an authenticated admin user to inject persistent JavaScript code inside the "Site title" parameter while updating the site settings. The "Site title" setting is injected in several locations which triggers the XSS.

CVSS3: 4.8
EPSS: Низкий
debian логотип

CVE-2022-23045

около 4 лет назад

PhpIPAM v1.4.4 allows an authenticated admin user to inject persistent ...

CVSS3: 4.8
EPSS: Низкий
github логотип

GHSA-v69x-m536-gjm5

около 4 лет назад

PhpIPAM v1.4.4 allows an authenticated admin user to inject persistent JavaScript code inside the "Site title" parameter while updating the site settings. The "Site title" setting is injected in several locations which triggers the XSS.

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2022-23045

PhpIPAM v1.4.4 allows an authenticated admin user to inject persistent JavaScript code inside the "Site title" parameter while updating the site settings. The "Site title" setting is injected in several locations which triggers the XSS.

CVSS3: 4.8
0%
Низкий
около 4 лет назад
debian логотип
CVE-2022-23045

PhpIPAM v1.4.4 allows an authenticated admin user to inject persistent ...

CVSS3: 4.8
0%
Низкий
около 4 лет назад
github логотип
GHSA-v69x-m536-gjm5

PhpIPAM v1.4.4 allows an authenticated admin user to inject persistent JavaScript code inside the "Site title" parameter while updating the site settings. The "Site title" setting is injected in several locations which triggers the XSS.

0%
Низкий
около 4 лет назад

Уязвимостей на страницу